Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-69025

Authenticated User permission "tool/dataprivacy:requestdelete" results in critical warning

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Minor Minor
    • None
    • 3.8 regressions
    • User management
    • None

      I have just installed Moodle 3.8.3 and when I looked at the security report, the Default role for all users has a critical error -  The default user role "Authenticated user" is incorrectly defined!

      I followed the posted solution to reset the authenticated user role to its default permissions but that dis not solve the problem.  I then saw this post - https://moodle.org/mod/forum/discuss.php?d=403379#p1628062 which suggested the problem is that the permission -  tool/dataprivacy:requestdelete" with risk RISK_DATALOSS is allowed by default for this role.  When I changed the setting on this role to Prevent, the critical error went away.  But it does seem like you would want users to be able to request delete, which is why this seems like a bug.

            Unassigned Unassigned
            elmonemo21 Michael Buchanan
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved:

                Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.